DevOps Day Jakarta Day 2 CI/CD on Google Cloud Platform by Davy Trinugraha

1. CI/CD on
Google Cloud Platform
Davy
Customer Engineer, Google Cloud
Google Indonesia

2. DevOps Principles
These are some key principles companies with DevOps cultures embrace…
● Treat your Infrastructure as Code
● Enable proper telemetry and monitoring on your systems
● Automate as much as possible
● Leverage Continuous Integration and Continuous Delivery/Deployment
● Focus on what matters to the customer with faster feedback loop

3. Immutable
infrastructure
Blue/green and
canary deployments
Release pipelines Feature flags
Integration and
performance tests
Rollbacks
Manual judgements
Incorporate monitoring
signals with deployment
How to Achieve These Principles

4. CI/CD Implementation is Big

5. ~83% of developers commit multiple times
a week
Source: Stackoverflow

6. Why CI/CD ?
● Ensures changes to code base are properly tracked, tested, and built
● Automation! Lessens chance of human error
● Easily track source of bugs and ability to rollback
● Faster time to market
● Avoid outages from deployments
● Happier development & operations teams
● More metrics to review and act on

7. Build/
Test
Artifact
storage
Deploy
GitHub
chef ansible
bash
scripts
terraform
jfrogquayjenkins drone.io
Travis CI
teamCity
circleCI Docker
Hub
BB
Gitlab
jenkins Datadog Prometheus
Source Monitor
Continuous Integration Continuous Delivery/Deployment
CI/CD has many ways ...

8. CI/CD made easy with Google Cloud
GCB
Build/
Test
Store
GCR GCS
DeploySource
CSR
AWS k8s
Multi-cloud
Azure OpenStack DC/OS BareMetal
Google Cloud
MonitorGCE GKE
GAE
Stackdriver
Google Cloud
GCFFirebase
Mobile
iOSPlay
Verifiable builds, vulnerability scanning, policy enforcement

9. Google Cloud Source Repositories
Source Repositories are fully-featured, private Git
repositories hosted on Google Cloud platform
● Supports standard set of Git commands (push, pull,
clone, log)
● Backed by Google Cloud Storage to provide
increased levels of availability and durability
● Supports multiple repositories per project
● Provides the ability to mirror your main repository
from your current repository hosted at GitHub or
Bitbucket
● Provides a nifty in browser code editor for your team
to make changes to your code base
● Supports viewing file diffs, along with commit history

10. Google Cloud Build
Cloud Build is a hosted build execution platform on GCP.
● Seamlessly integrates with Container Registry
● Specify what triggers your build process
● Cloud Build can run pipelines triggered by a Git event
● The build configuration can be either a Dockerfile or
cloudbuild.yaml
● After the build, the created images will be uploaded to
Container Registry

11. Google Cloud Container Registry
Container Registry is a fast, private Docker image repository on GCP
● Inherits benefit of availability, durability of GCP
● Charged based on overall storage of images, not on # of images
or # of repos
● Easily hooks into other GCP services
○ Deploy containers to GKE, GAE, GCE
○ Lock down permissioning on what systems or users can
access images using IAM
● We support integrations with many popular continuous delivery
systems
● Close integrations with open-source tool Grafaes
○ Provides vulnerability scanning
○ Allows for image metadata system

12. Spinnaker
● Spinnaker is an open-source, multi-cloud, continuous delivery platform for releasing
software changes with high velocity and confidence
● Spinnaker provides cluster management as well as deployment management
within the cloud
● Single pane of glass for deployments in multi-cloud and hybrid scenarios
● Open-source project led by Netflix, Google and other CI/CD thought leaders

13. Spinnaker: Cluster Management
Single pane of glass to manage global
deployments across multiple clouds.
Surface health and status of running
environments
Provides metadata around
deployments and individual instances.
Combines health monitoring with an
actionable UI to resolve issues

14. Spinnaker: Deployment Management
Spinnaker seamlessly manages deployment strategies

15. Stackdriver
Stackdriver is a SaaS ops suite from Google that is used by app developers &
operators to monitor & troubleshoot applications running on GCP, AWS, and cloud
native infrastructure, wherever it is hosted
Stackdriver’s mission is to help developers and operators keep their hybrid &
multi-cloud apps fast and available
Monitoring Logging Debug
Trace Error Reporting

16. Build & modernize apps
Supporting your developers to develop at their best
Google App Engine
Automated, fully managed, scalable
PaaS, integrated with containers
Apigee
Integrate legacy services
as APIs
Anthos and Kubernetes
Engine
Fastest, easiest way to implement
Kubernetes to deploy containers
Compute Engine
More than 6000 different
configurations of raw power to meet
your needs
Firebase
Popular mobile application
development integrated
with Cloud Platform

17. Defense in depth at scale, by default
Provenance from the bottom of the stack to the top
Purpose-built
chips
Purpose-built
servers
Purpose-built
storage
Purpose-built
network
Purpose-built
data centers

18. 1
Ponemon Institute Global Encryption Trends Study, 2017
100%
of Google Cloud
customers have
encrypted data
59%
of companies lack
an enterprise-wide
encryption strategy1
Bring Your
Own Keys
Encryption
by Default
FULLY-AUTOMATED
MANAGEMENT
MORE CUSTOMER
CONTROL
Manage
Keys
Encryption
by default

19. 3
23
3
3
3
3
3
3
4
3
3
3
33
3 3
Better global network infrastructure
A privately-owned network, isolated from the public internet
3
3
3
3
3

20. 3
3
3
3
3
3
3
3
33
3
3
4
3
Osaka
3
3
Continued global expansion
Regions
Jakarta coming soon !!
19 Zones available
58
3
3
3
3
Jakarta
3

21. Terima Kasih !!
Email : dtrinugraha@google.com
Mobile : +62 811 970 5979